Contract Detection Engineer - Remote

Role:

• Supporting the detection engineering lifecycle, including modelling, data onboarding, detection opportunity identification, detection development, detection deployment and testing/tuning.

Skills:

• Recent Detection Engineering experience of at least 2 years
• High degree of competency in KQL:
• Understanding the structure of KQL queries, where efficiencies can be gained, best practices and how to build detection logic
• Highly proficient in Splunk to at least Power User level
• Good understanding of Mitre Attack framework and experience of referencing and building content to the framework.
• Familiar with GitHub technologies and CI/CD practices.
• Good enterprise level understanding of Windows and Linux based operating systems, their management and any hardening or security controls.

**This role is inside IR35 and predominantly remote, although occasional onsite travel is required**